Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
File: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft (raw, json)
Hash identifier: 3rXyABA1lv2hSEoNN6BdkdtyqfsTUtI638PD1OAmxFw=
Subject key identifier: 81:0C:5A:76:D7:7C:84:84:F3:01:D3:6E:DA:16:B5:3B:68:0D:7F:9B
Authority key identifier: 5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
Certificate issuer: /CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Certificate serial: 0198D4E0D661F2F04B3F1DE96771A43C155A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
Manifest number: 1548
Signing time: Sat 23 Aug 2025 03:02:41 +0000
Manifest this update: Sat 23 Aug 2025 03:02:41 +0000
Manifest next update: Sun 24 Aug 2025 03:02:41 +0000
Files and hashes: 1: XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl (hash: EuG0ZuC8hpHh5FYMZFrtCx7TlDxXRXaNp8Tmkjcqpgw=)
2: xyAqUo1cBCxwcVbYVeKIYjCComY.roa (hash: 5YKuscwS6gvAjWMFAp+aYRLvaxsng69DrIJ3z9uUMo8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:d6:61:f2:f0:4b:3f:1d:e9:67:71:a4:3c:15:5a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5e42c35612f45af41103520af2761cdaa51e3aa4
Validity
Not Before: Aug 23 03:02:41 2025 GMT
Not After : Aug 24 03:02:41 2025 GMT
Subject: CN=810c5a76d77c8484f301d36eda16b53b680d7f9b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:ae:16:19:40:1e:99:b9:7d:19:b3:ac:f3:7c:
d0:7a:fb:0e:c5:04:54:3d:95:8d:1c:51:7f:43:14:
48:0e:43:5a:47:02:9d:ca:e4:80:aa:10:b5:7d:6b:
a3:46:25:61:bd:44:21:39:a2:8a:59:fc:31:da:f3:
bf:f0:5f:0d:43:25:37:4c:f9:20:db:f4:81:95:7e:
06:00:69:9d:7b:7f:09:93:15:7a:f6:2c:16:c1:6b:
fd:ba:2c:2e:4b:d8:75:10:40:b4:95:b6:10:65:09:
0c:be:36:d8:1d:c4:b0:6c:5b:40:b3:35:db:ea:3c:
6c:14:1d:35:3b:eb:75:b6:85:69:f8:cc:d6:2c:64:
43:cb:c0:ac:d0:ef:8c:2b:67:9c:f2:fb:d9:21:10:
16:85:05:93:c7:45:01:25:f4:35:d4:24:65:62:2c:
7e:3c:15:ad:be:d2:99:23:65:14:76:55:95:09:5c:
01:d4:80:54:07:6b:41:bd:2e:98:90:5f:65:73:d1:
07:e4:8f:e5:70:4a:0f:85:2a:7b:9f:64:29:b8:0b:
94:a3:26:1e:36:84:b8:a8:c5:96:05:18:da:94:1e:
0f:f4:1c:4b:1e:b2:13:42:1e:28:e3:d0:f6:00:e6:
12:59:5c:40:c0:b5:b2:f7:87:69:d0:1d:9e:bd:31:
cf:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:0C:5A:76:D7:7C:84:84:F3:01:D3:6E:DA:16:B5:3B:68:0D:7F:9B
X509v3 Authority Key Identifier:
keyid:5E:42:C3:56:12:F4:5A:F4:11:03:52:0A:F2:76:1C:DA:A5:1E:3A:A4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/674496-97bd-4eb0-a886-82119978d6bb/1/XkLDVhL0WvQRA1IK8nYc2qUeOqQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:cb:b6:f0:ee:25:76:b5:de:b2:5d:b4:ca:d6:90:62:01:39:
33:1c:69:05:17:8d:33:e7:dc:3b:aa:4c:90:b3:8c:1b:13:08:
3d:69:89:c9:48:4b:88:f6:02:6d:d9:53:48:5f:e5:40:5b:20:
34:c4:38:9d:29:9e:85:0c:8f:34:3e:82:07:d0:0b:dc:b9:30:
1c:a9:26:3d:1b:73:06:f9:92:08:dd:f3:c3:e6:91:e1:3b:cd:
ee:2d:a6:b8:a3:c7:e1:44:58:db:cd:e9:73:f3:0e:6f:3f:5e:
97:e8:4a:29:9d:80:1e:cd:d7:81:30:84:91:22:a1:0c:f4:18:
ca:99:0b:0c:92:d8:e4:79:98:23:18:ac:3b:31:c6:51:27:24:
bd:3d:90:cd:64:e9:71:7d:cf:50:c0:70:18:08:f6:73:43:1a:
b7:8c:83:5c:94:b3:94:9f:2d:06:78:fc:7d:15:f1:9a:7f:47:
4c:c8:11:83:e4:23:c2:62:27:a7:5b:18:3b:72:03:ad:92:05:
9d:4e:58:7b:e5:48:91:e8:3a:5c:b3:2f:3f:36:a6:31:e4:1a:
90:90:a2:f7:6c:6a:e0:2e:47:59:fa:da:86:8e:01:2d:79:2d:
6e:a8:e6:47:83:fb:5d:4a:08:ae:e6:f8:84:cd:d2:4a:73:c4:
46:9f:ad:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4NZh8vBLPx3pZ3GkPBVaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVlNDJjMzU2MTJmNDVhZjQxMTAzNTIwYWYyNzYxY2RhYTUx
ZTNhYTQwHhcNMjUwODIzMDMwMjQxWhcNMjUwODI0MDMwMjQxWjAzMTEwLwYDVQQD
Eyg4MTBjNWE3NmQ3N2M4NDg0ZjMwMWQzNmVkYTE2YjUzYjY4MGQ3ZjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0K4WGUAembl9GbOs83zQevsOxQRU
PZWNHFF/QxRIDkNaRwKdyuSAqhC1fWujRiVhvUQhOaKKWfwx2vO/8F8NQyU3TPkg
2/SBlX4GAGmde38JkxV69iwWwWv9uiwuS9h1EEC0lbYQZQkMvjbYHcSwbFtAszXb
6jxsFB01O+t1toVp+MzWLGRDy8Cs0O+MK2ec8vvZIRAWhQWTx0UBJfQ11CRlYix+
PBWtvtKZI2UUdlWVCVwB1IBUB2tBvS6YkF9lc9EH5I/lcEoPhSp7n2QpuAuUoyYe
NoS4qMWWBRjalB4P9BxLHrITQh4o49D2AOYSWVxAwLWy94dp0B2evTHP+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIEMWnbXfISE8wHTbtoWtTtoDX+bMB8GA1UdIwQY
MBaAFF5Cw1YS9Fr0EQNSCvJ2HNqlHjqkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYt
ODIxMTk5NzhkNmJiLzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC82NzQ0OTYtOTdiZC00ZWIwLWE4ODYtODIxMTk5NzhkNmJi
LzEvWGtMRFZoTDBXdlFSQTFJSzhuWWMycVVlT3FRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj8u28O4l
drXesl20ytaQYgE5MxxpBReNM+fcO6pMkLOMGxMIPWmJyUhLiPYCbdlTSF/lQFsg
NMQ4nSmehQyPND6CB9AL3LkwHKkmPRtzBvmSCN3zw+aR4TvN7i2muKPH4URY283p
c/MObz9el+hKKZ2AHs3XgTCEkSKhDPQYypkLDJLY5HmYIxisOzHGUSckvT2QzWTp
cX3PUMBwGAj2c0Mat4yDXJSzlJ8tBnj8fRXxmn9HTMgRg+QjwmInp1sYO3IDrZIF
nU5Ye+VIkeg6XLMvPzamMeQakJCi92xq4C5HWfraho4BLXktbqjmR4P7XUoIrub4
hM3SSnPERp+tHQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:42:09 2025 by rpki-client